CoreCVE
Back

HIGH

Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins

Published Jan 15, 2020

Description

Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-285

CWE-863

Incorrect Authorization

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner jenkins
Published Jan 15, 2020
Updated Aug 4, 2024
Reserved Dec 5, 2019
Link CVE-2020-2097
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-2097
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-2097
ENISA EUVD
Assigner jenkins
Published Jan 15, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2022-4113
EUVD-2022-4113 GHSA-H8W6-C53G-53VV